PT-2025-27968 · Linux+5 · Linux Kernel+5
Published
2025-06-11
·
Updated
2026-05-26
·
CVE-2025-38193
CVSS v3.1
5.5
Medium
| Vector | AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H |
Name of the Vulnerable Software and Affected Versions:
Linux kernel (affected versions not specified)
Description:
A vulnerability in the Linux kernel has been resolved, related to the SFQ perturb period in the net sched module. The issue was reported by Gerrard Tai, who found that the SFQ perturb period had no range check, which could be used to trigger a race condition. To prevent this, a check has been added to ensure that ctl->perturb period * HZ will not overflow and is positive. The vulnerability can be triggered by setting an invalid perturb period, such as a negative value or a value that is too large.
Recommendations:
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploit
DoS
Integer Overflow
Race Condition
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Debian
Linuxmint
Linux Kernel
Red Os
Suse
Ubuntu